Governed Self-Service at Scale